M365 Security Engineer

Job description

SoftwareOne and Crayon have come together to form a global, AI-powered software and cloud solutions provider with a bold vision for the future. With a footprint in over 70 countries and a diverse team of 13,000+ professionals, we offer unparalleled opportunities for talent to grow, make an impact, and shape the future of technology. At the heart of our business is our people. We empower our teams to work across borders, innovate fearlessly, and continuously develop their skills through world-class learning and development programs. Whether you're passionate about cloud, software, data, AI, or building meaningful client relationships, you’ll find a place to thrive here. Join us and be part of a purpose-driven culture where your ideas matter, your growth is supported, and your career can go global. 

As an Associate Consultant – Cyber Security, you will be responsible for monitoring, supporting, and delivering security solutions that protect our customers' environments. You will work closely with internal teams and customers to manage security incidents, perform health checks, troubleshoot issues, and ensure operational excellence across a range of cybersecurity technologies.

Key Responsibilities

• Monitor, detect, triage, and support security incidents within customer environments.
• Perform regular health checks on security solutions and proactively identify potential risks before business impact occurs.
• Investigate and resolve security-related incidents, service requests, changes, and problem tickets.
• Troubleshoot security service issues and participate in post-incident reviews.
• Support the delivery and administration of Microsoft 365 security technologies including Intune, Defender, MDM, and Compliance solutions.
• Contribute to technical documentation, knowledge articles, and process improvements based on recurring incidents.
• Collaborate with Subject Matter Experts (SMEs) during incident and problem resolution.
• Follow Incident, Request, Problem, Change, and Access Management processes aligned with ITIL best practices.
• Participate in on-call support and flexible shift schedules, including 24x7 operations when required.

• Minimum 4 to 7 years of experience working in a Security Operation Centre monitoring, detecting, triaging and supporting security solutions related to M365 Intune and Defender 
• Experience in monitoring, detecting, supporting and delivering security solutions such M365 Intune, MDM, Defender, O365 Security and compliance in DKIM, O365 EOP, ATP, AIP, Azure AD, CAS Alerts Management, Proof Point Email Security, FireEye ETP, TrendMicro, DLP, Email and Web Security, SPAM filtering, Vulnerability Scanning, 
  Firewalls, IPS/IDS, etc 
• Have a good understanding and awareness of 2 or more of the following: Proof Point, Intune / Defender ,Trend Micro Deep Security , Trend Micro ApexOne , Qualys Guard / Metasploit / Nessus Tenable , Microsoft M365 MDM, Security and Compliance,Splunk Enterprise and Security ,CyberArk 
• Have a good understanding of ticket management and service requests 
• Have a good understanding of Security Operations and Service Delivery 
• Exposure to ISO 27001, PCI related certification and compliance practices 
• Awareness and expertise of using at least 1 Enterprise Ticketing system 
  ITIL processes in supporting Security Solutions and Service Delivery 
• The employee may need to work Flexible Hours to provide extended support and may need to come in 24x7 shifts & be available on call when required 
• Engineering Degree in Computer Science or Technical Degree with certifications in Information Technology or Information Security  
• Cisco certifications such as CCNA 
• Microsoft certifications such as MCSA, MS-100, MS-101 and MS-500 
• Technical Certifications in TrendMicro, FireEye, Proofpoint, Qualys, Cisco, Cloud Raxak, KnowBe4, Splunk, CyberArk, Okta, Digital Guardian, McAfee CASB Security Products Preferred